Voot, a part of Indian media behemoth Viacom18 is a leading OTT platform.
About VOOT
Voot, the OTT platform of Viacom18, is a popular Indian subscription-based video-on-demand service. This pervasively accepted OTT content platform was launched in March 2016. Voot is available as a mobile application for iOS, Android, and Kaios users, as well as a website for use on desktops.
Challenge
Security governance and compliance were critical for VOOT, And not easy!
Being a leading OTT platform, the Voot team was facing challenges with continuous event monitoring and taking proper actions on critical security issues across systems. Architects and the internal audit team had difficulty monitoring their security governance and compliance posture continuously. Especially in the fast-changing dynamics of the public cloud. In addition, engineers and architects were having trouble getting a unified inventory of the assets spread across multiple accounts and platforms.
A customised and scalable posture management solution, courtesy Cloudlytics
Cloudlytics proposed a tailored solution that involved a customized monitoring strategy for their infrastructure along with custom-designed scaling policies. This solution included configuration of the data received from AWS services such as Cloudfront, S3, and Cloudtrail at the rate of 8,000 events per second, with a 30-day retention period in hot storage. This helped the Voot team to analyze & monitor every event that occurred, with the use of customized consolidated dashboards. An alert monitoring engine was used to leverage the predefined set of alerts. Also, customized alerts were utilized along with the query builder panel to gain alerts on business-critical events. The internal audit team of Voot leveraged our continuous compliance monitoring engine to monitor their platform’s compliance posture across various regulations, mandatory and otherwise.
Security governance has been set up using a Compliance In Cloud engine with tailored policies. Regular automated scans with detailed reports, along with remediation steps, have been configured. This is meant to be shared with stakeholders.
The asset inventory engine is being used to continuously get the asset details across
multiple accounts and platforms. This is available with a predefined set of
dashboards to get an overview and resource trees.
Services Used
- Event Analytics
- Compliance in Cloud
- Alerts & Notifications
- User Access Behaviour Analysis
- Customized KPI and Dashboards
- Cloud Asset Inventory
- AWS Services – Amazon Cloudwatch Logs, AWS Cloudtrail, Amazon CloudFront, AWS WAF, AWS Security Hub, AWS Secrets Manager, AWS KMS, AWS Organization
A turnaround in compliance posture. An improved security performance.
- Improved performance quality with 8000+ events processed per second
- Compliance Posture improved by 30% in just a month
- More than 30% savings on Cloud Spend
- 140+ misconfiguration detected and remediated in just a month
